Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/5bea5e50-cbd5-36f0-b6c5-469f7ab50a99.roa
File:                     5bea5e50-cbd5-36f0-b6c5-469f7ab50a99.roa (raw, json)
Hash identifier:          XfgPh/OqQkwKh9mg+XTx3h6q9l2oGkkMCZ4YInLWHi8=
Subject key identifier:   70:58:A5:B8:42:A2:C2:22:F8:B2:4E:D7:3F:55:E0:24:10:E3:48:93
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F43285847CA97D8ECCFDD267369182CC0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/5bea5e50-cbd5-36f0-b6c5-469f7ab50a99.roa
Signing time:             Wed 06 Nov 2024 16:59:11 +0000
ROA not before:           Wed 06 Nov 2024 16:59:11 +0000
ROA not after:            Tue 04 Feb 2025 16:59:11 +0000
asID:                     5650
IP address blocks:        96.44.150.0/24 maxlen: 24
                          104.223.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:97:d8:ec:cf:dd:26:73:69:18:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Nov  6 16:59:11 2024 GMT
            Not After : Feb  4 16:59:11 2025 GMT
        Subject: CN=d39f0e16-7308-49cc-842e-ae5059df0af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:df:1e:45:e6:0a:28:37:ed:ed:73:b1:0a:
                    23:ad:68:80:a8:06:50:ca:c9:8b:d6:2a:90:e2:e7:
                    ce:44:c1:69:5a:b1:20:f4:08:e3:fd:78:6a:f3:33:
                    fd:d4:bc:30:4b:b1:8f:70:17:b0:45:05:4f:64:23:
                    8c:fa:a3:16:c0:8f:cf:1c:5e:d2:eb:be:2a:e4:65:
                    05:26:98:f2:bc:c3:a0:0e:b3:d9:f1:76:b4:a3:66:
                    93:91:a4:62:be:58:47:1f:e6:c4:7c:4b:f4:7c:b0:
                    44:b0:f2:e5:14:7a:65:7f:32:a8:d5:69:81:d5:36:
                    61:c6:c4:69:80:5b:3c:36:fb:01:81:da:b0:88:e4:
                    6b:f0:89:48:d3:b8:a6:8f:fb:cf:35:89:a7:c9:f9:
                    3f:9a:24:25:54:bc:e7:0c:54:7f:32:b6:ba:4a:dd:
                    53:92:cc:7b:73:ba:d1:7c:19:f8:18:c2:0b:08:d2:
                    50:e9:2d:31:66:f7:29:58:e6:88:ca:6e:15:1d:84:
                    d5:ea:fa:50:d4:6b:00:72:d1:11:2a:c8:e7:11:c2:
                    09:07:cd:db:ad:13:42:08:c3:8b:a4:86:f5:97:f5:
                    c1:98:a1:cb:0b:83:9b:e0:06:f6:3d:86:f7:15:80:
                    94:16:31:82:04:82:2c:b2:0c:ac:eb:8a:1d:42:63:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:58:A5:B8:42:A2:C2:22:F8:B2:4E:D7:3F:55:E0:24:10:E3:48:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/5bea5e50-cbd5-36f0-b6c5-469f7ab50a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.44.150.0/24
                  104.223.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:00:6b:47:17:16:78:f7:0a:08:9e:6d:5d:86:68:3a:f7:2f:
         36:25:e5:28:b7:e5:6d:e2:d2:cc:60:8b:f7:08:fa:27:19:1e:
         e6:15:a6:19:7b:17:9a:ed:e6:d6:31:7b:4d:dd:d8:54:0e:17:
         bb:bf:ba:56:a4:e6:59:d2:00:b4:85:3c:cb:47:e0:83:3a:ce:
         a2:b5:90:0d:a9:d7:a0:e0:7a:b8:55:d2:73:ca:b4:d9:a5:ec:
         f3:87:88:6b:b8:86:58:f6:89:14:5a:fc:0f:e1:33:c8:22:ec:
         b8:82:81:5d:d2:dc:84:b9:17:55:1e:53:50:4d:e2:4e:5c:67:
         7a:e2:2e:c5:96:2e:36:77:14:6c:7b:ea:e1:fd:6c:fa:58:a6:
         02:bc:d8:6f:b8:f5:7b:fc:a4:16:39:75:5a:93:18:4f:4d:9a:
         c6:17:46:4b:0d:5d:8d:5c:ed:a2:4c:5f:92:98:d1:13:f1:36:
         8b:48:47:09:b3:17:f6:2b:30:0b:a5:ee:eb:90:0c:41:6f:72:
         b5:26:3d:a8:f5:1b:e8:80:e8:c1:d7:1e:9c:e8:a2:a6:5e:d2:
         36:de:16:b8:c0:3c:50:3f:8c:8c:f5:9d:6b:56:d5:32:c7:19:
         dd:df:55:e5:13:cc:73:aa:10:1f:0b:c1:a6:5c:a1:92:01:8a:
         c3:59:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org